CVE-2023-41884Disclosure(zoneminder / zoneminder)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes a few parameter in sql query without sanitizing it which makes it vulnerable to sql injection. This vulnerability is fixed in 1.36.34.

zoneminder CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

Exploit / PoC references

https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-2qp3-fwpv-mc96

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

zoneminder

Threat summary

1 mentions across 1 observed day

What's happening

Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

zoneminder

Products

zoneminder

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://seifallahhomrani.gitbook.io/seifallahhomrani/security-research/zoneminder-sql-injection-analysis-cve-2023-41884-cve-2024-43360

Full discourse1 post

Seif-Allah@seifallah__209d
Disclosure
Don't blindly recommend parameterized statements for every SQLi you find — understand the injection point and the final query structure, then tailor your recommendation accordingly. https://seifallahhomrani.gitbook.io/seifallahhomrani/security-research/zoneminder-sql-injection-analysis-cve-2023-41884-cve-2024-43360
Post summary
The author links to a GitBook analysis of ZoneMinder SQL injection CVEs 2023‑41884 and 2024‑43360, recommending careful review of injection points rather than blanket parameterization.
0001088
285 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	zoneminder	zoneminder	-	-	-

Explore more

Back to dashboard zoneminder CVEs zoneminder vulnerabilities